Security Weekly Podcast Network (Audio)

Claude Registers for Citizenship, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland, and More on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-624

To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus on vulns and patches is even the right choice for an appsec program. Then it's on to incentives, the role of agents in writing and securing software, and what we should be looking for to bring new appsec practitioners into the industry.
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-404

Interview with Hadar Krasner, Co-Founder and CPO of Bold Security
This week's interview with Hadar is a fascinating dive into the history of data security and why they chose to tackle endpoint-focused data security. We discuss why securing data is traditionally such a challenging task, making it clear why Bold is such a fitting name for the company. After 30 minutes, we barely scratched the surface and are hoping we can have them back soon for another interview!
Segment Resources:
https://www.bold.security/blog/endpoint-data-ai-human-risk-convergence
https://www.bold.security/blog/what-is-real-time-endpoint-data-protection-bold-makes-it-a-reality
This segment is sponsored by Bold Security. Visit https://securityweekly.com/bold-security to learn more about them!
Topic - Don't Let AI Ruin Your Talk
In this week's topic segment, we discuss the emerging epidemic of low-effort AI-generated slides. AI can definitely make slide creation less painful, but you still need to put some effort in to make a good looking deck that makes sense. If you don't, your audience WILL notice.
Enterprise Security News
Finally, in the enterprise security news,
we discuss the Sawtooth problem
cybersecurity is center stage in AI
not everyone is a big fan of passkeys
Ross Haleliuk is back with some interesting essays
insider threats: sometimes the cybercriminal was inside your organization all along
AI can now read your mind
and as always, we’ll kick off with the vibes
All that and more, on this episode of Enterprise Security Weekly.
Visit https://www.securityweekly.com/esw for all the latest episodes!
Show Notes: https://securityweekly.com/esw-480

Airline Zoom Calls, School Picture Day, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet, and More on this episode of the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-623

In the security news this week:
BPFDoor
OpenSSH compresses a little too much
AI can find bugs. Who gets them fixed?
TP-Link and the courts
Cisco NX-API
ClingSTUN
LineageOS, Android TV, and a Raspberry PI
Dell’s updater has a privilege problem
SonicWall SSRF
U-Boot’s LogoFAIL like
Exploit-DB isn’t dead
MFA passes. The attacker still gets in.
LakeShark and cool gadgets
Kasa cameras and an exposed debug interface
SharePoint hardening is back on the checklist
Google pauses open-source bug bounty submissions
NetScaler’s latest vulnerability needs a closer look
Kiteworks tells customers to shut it down
Exchange gets an unexpected security update
Do LLMs actually reason?
disagree on AI risk?
Anthropic, AI consciousness and the Vatican
Grok gets involved in foreign policy
WordPress malware that survives cleanup
Can spyware vendors stop their own tools?
When an AI chatbot conversation reaches the police
Open-weight AI models enter the cyber debate
AI agents take their attacks shopping
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-947